Automating Governance: Moving from "Draft" to "Published" Standards
Stop trading velocity for compliance. You can have both.
Following the success of our recent workshop in Toronto with major Canadian financial institutions, the Open SDLC Controls Framework working group is coming to London.
For most financial institutions, "Audit Season" remains a manual, friction-filled process of gathering screenshots and halting deployments. This workshop is designed to change that. Join industry leads to help finalize the next set of "Controls as Code."
In regulated industries, delivering software quickly and securely requires a delicate balance between enterprise policy and developer experience. Building on the success of the Common Cloud Controls and the AI Governance Framework, this initiative provides a shared, technology-agnostic vocabulary for SDLC controls that the entire industry can adopt.
This London session marks a critical milestone: The Transition from Draft to Published (in preparation for making a formal contribution proposal as a standards project in the FINOS community). We will move beyond high-level theory into the technical "brass tacks" of governance. Participants will engage in interactive working sessions to review, refine, and finalize controls that bridge the gap between what an auditor requires and what a CI/CD pipeline executes. We will specifically focus on newly contributed areas including testing gates, service dependency mapping, and tooling inventories.
This session is designed to bring the "Three Lines of Defense" together:
Note: Priority will be given to individuals from FINOS Member financial institutions and regulated industries.